gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-27 23:47:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: document SHA-1 HMAC migration proposal (#747) (#4009)

Browse Source
This commit is contained in:
Zhengchao An
2026-06-28 19:42:18 +08:00
committed by GitHub
parent 8d0ba1cd3c
commit a37e918936
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/signer/src/request_signature_v2.rs
+8
View File
@@ -26,6 +26,14 @@ use super::utils::{HostAddrError, try_get_host_addr};
use rustfs_utils::crypto::{hex, hmac_sha1}; use rustfs_utils::crypto::{hex, hmac_sha1};
use s3s::Body; use s3s::Body;
// NOTE: SHA-1 HMAC is used here for AWS S3 Signature V2 compatibility.
// SHA-1 is considered weak, but it's only used for HMAC (not signature collision).
// Migration plan (not yet implemented):
// Phase 1: Support both SHA-1 and SHA-256 (configurable)
// Phase 2: Deprecation warnings in response headers
// Phase 3: Default to SHA-256, SHA-1 becomes optional
// See https://github.com/rustfs/backlog/issues/747 for discussion.
const _SIGN_V4_ALGORITHM: &str = "AWS4-HMAC-SHA256"; const _SIGN_V4_ALGORITHM: &str = "AWS4-HMAC-SHA256";
const SIGN_V2_ALGORITHM: &str = "AWS"; const SIGN_V2_ALGORITHM: &str = "AWS";